Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3597

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  2. 🥈

    Mantra

    $5.50B

  4. #4

    LuBian

    $3.50B

    bitcoin

  7. #7

    Thodex

    $2.00B

  9. #9

    Finiko

    $1.50B

  10. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 2401-2450 of 3597 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
2401 PePe Coin — binance Rugpull — View →
2402 PiggyBank Community Token — ethereum Honeypot — View →
2403 Gold Finance — - Rugpull — View →
2404 TeamRocket — binance Honeypot — View →
2405 HOGtoken — binance Honeypot — View →
2406 GAMEE — ethereum Honeypot — View →
2407 geckoswap.finance — binance Honeypot — View →
2408 SolaSystem — ethereum Honeypot — View →
2409 FLEX — binance Honeypot — View →
2410 SafeDream — binance Honeypot — View →
2411 Kong Coin — binance Honeypot — View →
2412 Chihuahua Taco — binance Honeypot — View →
2413 Step.finance — ethereum Honeypot — View →
2414 UNITYtoken — binance Honeypot — View →
2415 Binance-Peg Polygon — binance Honeypot — View →
2416 MoneyTreeFarm — - Rugpull — View →
2417 White Moon Finance — - Rugpull — View →
2418 Swaaaaap.com — - Rugpull — View →
2419 BeastMode Token — - Rugpull — View →
2420 Valorant Finance — - Rugpull — View →
2421 Euro Token — - Rugpull — View →
2422 PolyGoose Token — - Rugpull — View →
2423 Cheetah Token — - Rugpull — View →
2424 Red Eagle Token — - Rugpull — View →
2425 HarvestLock — - Rugpull — View →
2426 TreeToken — - Rugpull — View →
2427 Sigma — - Rugpull — View →
2428 BabyCakeGold — - Rugpull — View →
2429 Rapture — - Rugpull — View →
2430 Stonks Token — - Rugpull — View →
2431 Fisherman Finance — - Rugpull — View →
2432 Golden Bar Farm — - Rugpull — View →
2433 PolyApe Token — - Rugpull — View →
2434 Fire Swap — - Rugpull — View →
2435 Pikachu Swap — - Rugpull — View →
2436 Polysafemoon — - Rugpull — View →
2437 SuperSwap — ethereum Honeypot — View →
2438 ElonTech — binance Honeypot — View →
2439 KitKat — binance Honeypot — View →
2440 SHINGEKINOTOKEN — binance Honeypot — View →
2441 Goldfinch Finance — ethereum Honeypot — View →
2442 element.fi — ethereum Honeypot — View →
2443 Ailuropodinae — binance Rugpull — View →
2444 Predator Swap — binance Rugpull — View →
2445 DonutDeFi — binance Rugpull — View →
2446 NoMoreDogs — binance Rugpull — View →
2447 PolyMiner — polygon Rugpull — View →
2448 Hamster Swap — binance Rugpull — View →
2449 Hammy Finance — binance Rugpull — View →
2450 PuffinSwap — binance Rugpull — View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.

Start Free Trial → View Full Course